📰 4 sources 4 articles · 28 Sep 2026, 17:50 → 19 days ago

Breaches Expose Data of FBI Employees and U.S. Defense Department Personnel

The United States saw the disclosure of two separate breaches affecting government employee data: one targeting FBI employees' information via the job application portal, with the ShinyHunters group claiming responsibility, and another affecting a Pentagon database and the file exchange system of the Defense Manpower Data Center (DMDC). Both incidents involve sensitive personal data including names and Social Security numbers.

📍 Where things stand: The FBI is continuing to investigate a "cyber incident" it says targeted its employees' data, while a U.S. defense official said the vulnerability in the Defense Department database was addressed immediately upon discovery and no evidence of misuse has been found so far.

⏱️ Timeline

28 Sep 2026, 17:50 The Federal Bureau of Investigation (FBI) notified its employees that their personal information was stolen in a cyberattack targeting the job application portal, in the first acknowledgment of the breach. In an internal notice, the bureau said names, addresses, job titles and Social Security numbers of agents were exposed, while reports said medical and psychological data were also stolen. The ShinyHunters group said it exploited a vulnerability in an Oracle PeopleSoft server and that it is not demanding a ransom.
29 Sep 2026, 09:22 ABC News revealed unauthorized access to a database belonging to the U.S. Department of Defense "the Pentagon," exposing sensitive personal information of about 3 million people, including military personnel and civilian employees. A U.S. defense official said the incident covered data on 2.76 million living people and 294,000 deceased, spanning from October 2025 to July 2026, and explained that the vulnerability was addressed immediately upon discovery, with no evidence of misuse found so far.
29 Sep 2026, 09:34 The U.S. Federal Bureau of Investigation acknowledged it is investigating a "cyber incident" targeting the data of its current and former employees, after the "ShinyHunters" group claimed responsibility for the breach. In an internal memo, bureau leadership said it is operating on the basis that the attacker is leaking the personal information of all bureau employees, according to multiple reports. The leaked data is indicated to contain home addresses, Social Security numbers, job duties and unit names.
29 Sep 2026, 09:42 The file exchange system of the U.S. Defense Manpower Data Center (DMDC) suffered a security breach that exposed unencrypted personal data of about 3.05 million people, including 2.76 million living and 294,000 deceased, in an intrusion that lasted nine months between October 2025 and July 2026. The exposed data included names, contact information, dates of birth, Social Security numbers, gender, race and military specialties.

Timeline written by AI from the sources below; updated as new reports arrive.

How the sources covered it

TechCrunch and Silicon UK focused on the FBI's acknowledgment, the internal notice and its employees' data, and the ShinyHunters group, while Lebanon Debate and Cybersecurity focused on the Defense Department data breach, the number of those affected and the details of the exposed fields, citing ABC News and a defense official in the first and describing the affected system in the second.

TechCrunch Presented the news as the FBI's first acknowledgment, citing an internal notice mentioning names, addresses, job titles and Social Security numbers, referred to reports of stolen medical and psychological data, and cited ShinyHunters saying it exploited a vulnerability in an Oracle PeopleSoft server.
Lebanon Debate Opened with the disclosure reported by ABC News of unauthorized access to a Defense Department database, highlighting the number affected (about 3 million), the breakdown of 2.76 million living and 294,000 deceased and the period from October 2025 to July 2026, while stressing that the vulnerability was addressed immediately upon discovery.
Silicon UK Focused on the bureau's acknowledgment that it is investigating a "cyber incident" affecting current and former employees' data, cited an internal memo saying the bureau is operating on the basis that the attacker is leaking information on all its employees, and said the leaked data includes home addresses, Social Security numbers, job duties and unit names.
Cybersecurity Highlighted the breach of the file exchange system at the Defense Manpower Data Center (DMDC), described the data as unencrypted, gave the number affected as 3.05 million and the timeframe of an intrusion lasting nine months, and detailed exposed fields such as dates of birth, gender, race and military specialties.

AI comparison of what each outlet emphasized. It describes emphasis, not accuracy.

TechCrunchLebanon DebateSilicon UKCybersecurity

📰 All coverage

📅 2026-09-29

Cybersecurity 09:42

DMDC Server Breach Exposes Data of 3.05 Million U.S. Defense Personnel

The file exchange system of the U.S. Defense Manpower Data Center (DMDC) suffered a security breach that exposed unencrypted personal data of about 3.05 million people, including 2…

Silicon UK 09:34

FBI Acknowledges Major Hack of Employee Data

The US Federal Bureau of Investigation acknowledged it is investigating a "cyber incident" targeting data of current and former employees, after the group ShinyHunters claimed resp…

Lebanon Debate 09:22

Pentagon data breach exposes information of about 3 million people

ABC News revealed unauthorized access to a Pentagon database, exposing sensitive personal information of about 3 million people, including military personnel and civilian employees…

📅 2026-09-28

TechCrunch 17:50

FBI reportedly declares 'cyber security incident' after hackers steal agents' personal data

The FBI told its employees that their personal information was stolen in a cyberattack targeting the bureau's job application portal, its first acknowledgement of the breach. The b…